What syscalls we should block from containers to make the build run safe?
What syscalls we should block from containers to make the build run safe?